Abstract: Systems, methods, and software provided herein identify unverified behavior in an application component environment. In one example, a method of operating a collection service includes receiving communication data for a plurality of application components and generating a baseline set of communication interactions for the application component environment based on the communication data. The method further includes receiving additional communication data for the application components and generating a second set of communication interactions for the application component environment based on the communication data. The method also provides identifying a differential set of communication interactions by comparing the baseline set and the second set of communication interactions.

Abstract: Systems, methods, and software provided herein manage behavioral data for application components in a computing environment. In one example, a method of operating collection service includes receiving behavior reports for application containers in a computing environment. Once received, behavioral data in the behavior reports is stored in a tree data structure, wherein the tree data structure includes nodes for various time periods. Once the behavioral data is stored, a request may be generated for a portion of the behavioral data over a defined time period. In response to the request, a response summary may be generated based on the tree data structure and the defined time period.

Abstract: Systems, methods, and software provided herein generate a visual representation of communication between application components. In one example, a method of operating a method of operating a collection service system includes receiving a plurality of communication reports representing communications for application components, and storing the communication data from the plurality of communication reports in one or more data structures. The method further provides identifying administrator defined display parameters for the communication data, and generating a visual representation of the application components based on the display parameters and the one or more data structures.

Abstract: Systems, methods, and software to manage encryption keys in an application container environment are provided. In one example, a method of managing encryption keys comprises identifying a plurality of data objects to encrypt and encrypting the plurality of data objects via a plurality of encryption keys. The method further provides generating supplemental data for each data object, wherein the supplemental data for each data object comprises a key identifier that corresponds to an encryption key used to encrypt each data object. The method further includes associating the supplemental data for each data object with the encrypted version of each data object, and organizing the key identifiers from the plurality of data objects into a data structure with the plurality of encryption keys.

Abstract: The present invention provides for a system and method for data network control. Using a flow control system, embodiments of the present invention can analyze traffic flow volume and performance, incorporate usage, billing, and cost control data to yield an improved data network controller. Efficiency in data routing is improved while costs are decreased by enabling the selection of the optimal performance data route. Cost constraints and costs are minimized for an overall data load. Given a diverse set of cost structures for available transit providers, the overall system cost can be minimized by distributing traffic in a manner that takes advantage of the diverse billing structures and yet maintains acceptable performance levels. Systems and methods in accordance with embodiments of the present invention determine projected flow performance and projected flow volume in relation to the available bandwidth and marginal cost to a destination provider.

Abstract: The present invention provides for a system and method for data network control. Using a flow control system, embodiments of the present invention can analyze traffic flow volume and performance, incorporate usage, billing, and cost control data to yield an improved data network controller. Efficiency in data routing is improved while costs are decreased by enabling the selection of the optimal performance data route. Cost constraints and costs are minimized for an overall data load. Given a diverse set of cost structures for available transit providers, the overall system cost can be minimized by distributing traffic in a manner that takes advantage of the diverse billing structures and yet maintains acceptable performance levels. Systems and methods in accordance with embodiments of the present invention determine projected flow performance and projected flow volume in relation to the available bandwidth and marginal cost to a destination provider.